What is CVE-2006-5824?

CVE-2006-5824 is a vulnerability in Freebsd. Published 2006-11-09.

Is CVE-2006-5824 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Freebsd

CVE-2006-5824

Integer overflow in the ffs_rdextattr function in FreeBSD 6.1 allows local users to cause a denial of service (kernel panic) and trigger a heap-based buffer overflow via a crafted UFS filesystem, a different vulnerability than CVE-2006-5679. NOTE: a third party states that this issue does not cross privilege boundaries in FreeBSD because only root may mount a filesystem.

EPSS: 0.004 (28.7th percentile) — read the EPSS interpretation.

Affected products

Freebsd — versions 6.1
N/a — versions n/a

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cve@mitre.org (mailing-list, x_refsource_MLIST)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)

Frequently asked questions

What is CVE-2006-5824?: CVE-2006-5824 is a vulnerability in Freebsd. Published 2006-11-09.
Is CVE-2006-5824 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.